本文へ移動
cccskills
無料GitHub で公開

ai-compliance

AI compliance analysis for EU AI Act, ISO 42001, NIST AI RMF, GDPR, OECD, financial services regulations (SEC, FCA, FINRA, DORA, MiFID II), and other frameworks. Use when asked to generate a compliance checklist for an AI tool or use case, determine if a risk assessment is required, score an AI tool's risk level, identify where an AI tool or use case could run afoul of regulatory requirements, perform a gap analysis, recommend remediation steps, assess a vendor, draft an acceptable use policy, map training requirements, or review jurisdiction-specific AI rules. Triggers on phrases like "compliance checklist", "risk assessment", "risk score", "does this comply", "EU AI Act", "ISO 42001", "NIST AI RMF", "AI governance", "gap analysis", "vendor assessment", "acceptable use policy", "MNPI", "AI training requirements", or any request to evaluate an AI tool or use case for regulatory compliance or risk.

インストール方法を見る

含まれるファイル(18)

  • SKILL.md4.6 KB
  • _meta.json132 B
  • references/ai-inventory.md2.7 KB
  • references/aup-template.md3.7 KB
  • references/checklist-templates.md4.1 KB
  • references/data-classification.md3.7 KB
  • references/eu-ai-act.md2.6 KB
  • references/finserv-regulations.md4.7 KB
  • references/incident-response.md4.9 KB
  • references/iso-42001.md3.4 KB
  • references/iso27001-alignment.md4.4 KB
  • references/jurisdiction-map.md4.3 KB
  • references/nist-ai-rmf.md4.6 KB
  • references/other-frameworks.md2.6 KB
  • references/remediation-playbooks.md6.6 KB
  • references/risk-scoring.md4.4 KB
  • references/training-requirements.md3.3 KB
  • references/vendor-assessment.md3.5 KB

SKILL.md(原文)

インストールする前に、エージェントに与えられる指示の中身を確認できます。

AI Compliance Skill

Reference Files

Load only what's needed based on the request type:

Frameworks

  • EU AI Act → references/eu-ai-act.md — risk tiers, prohibited uses, obligations
  • ISO 42001 → references/iso-42001.md — clauses, Annex A controls
  • NIST AI RMF → references/nist-ai-rmf.md — GOVERN/MAP/MEASURE/MANAGE
  • GDPR, OECD, IEEE, UK, Singapore → references/other-frameworks.md
  • Financial services (SEC, FCA, FINRA, DORA, MiFID II, MNPI) → references/finserv-regulations.md
  • Jurisdiction map (global regulatory landscape) → references/jurisdiction-map.md
  • ISO 27001 alignment → references/iso27001-alignment.md

Output Templates & Tools

  • Checklists, risk assessment, gap analysis templates → references/checklist-templates.md
  • Vendor AI risk assessment questionnaire → references/vendor-assessment.md
  • Acceptable use policy template → references/aup-template.md
  • Data classification × AI tool matrix → references/data-classification.md
  • AI system inventory template → references/ai-inventory.md
  • AI risk scoring model (0–100) → references/risk-scoring.md
  • Training requirements by role → references/training-requirements.md

Remediation

  • Incident response playbooks → references/incident-response.md
  • Remediation playbooks (common gaps) → references/remediation-playbooks.md

When in doubt about which files to load, load the framework files + the relevant output template.

Workflow

1. Understand the AI Tool/Use Case

Gather (or ask for):

  • What does the AI system do? (intended purpose)
  • Who uses it and how? (internal staff, customers, automated pipeline)
  • What data does it process? (personal, financial, confidential, public)
  • Where is it deployed? (EU context? affecting EU residents?)
  • Consumer or enterprise tier? Third-party or internal?

2. Select Output Type

RequestLoadOutput
Compliance checklistFramework files + checklist-templates.mdFull checklist per Template 1
Risk assessment needed?eu-ai-act.md + checklist-templates.mdRisk tier determination per Template 2
Gap analysisAll framework files + checklist-templates.mdGap table per Template 3
Risk scorerisk-scoring.mdScored worksheet + risk level
Vendor assessmentvendor-assessment.mdQuestionnaire + scoring
AUP draftaup-template.mdCustomized policy draft
Data classification guidancedata-classification.mdMatrix + decision tree
Incident responseincident-response.mdRelevant playbook
Remediation stepsremediation-playbooks.mdRelevant playbook(s)
Financial services overlayfinserv-regulations.mdRegulatory requirements
Training requirementstraining-requirements.mdRole-based matrix
Jurisdiction guidancejurisdiction-map.mdApplicable rules by region

3. Output Structure

Always structure output as:

## AI Compliance Assessment: [Tool/Use Case Name]
### Risk Classification
### Applicable Frameworks
### Compliance Checklist (or Gap Analysis or Risk Score)
### Issues Found
### Recommendations
### Priority Actions

Key Principles

  • Reference exact articles, clauses, controls (e.g., "EU AI Act Art.14", "ISO 42001 A.6.1", "NIST GOVERN 1.2")
  • Flag HIGH/CRITICAL severity issues prominently — these are blockers
  • Always include remediation steps, not just gaps — link to remediation-playbooks.md when relevant
  • Cross-reference frameworks where they overlap
  • For financial services firms: always check finserv-regulations.md for MNPI and sector-specific rules
  • When uncertain about risk tier, err toward higher risk classification

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

同じリポジトリのスキル

概要と使いどころ

中国大陆地区法院类案快速检索与《案件检索报告》(DOCX)生成技能。以案件五项要点(案由/法律关系、争议焦点、关键事实、我方诉请与诉讼地位、请求权基础法条)为检索锚点,经一次四问确认即开工(其中**检索地域范围**与**裁判时间范围**为强制选择题,默认范围为「2021年1月1日以后裁判的浙江省范围内的法院案例」,用户点选默认后须回显该范围提示);按**请求权基础、法律关系、案件事实三要素**判定高匹配——用户**指定**检索特定结果的案例时结果相似度计入评分(四要素满分 10 分),用户**未指定**时结果相似度不作为高匹配考虑因素(三要素满分 8 分);r1 判定须**核对法条版本与时间效力**,援引已失效旧法条者不得给满分;以语义向量检索为主召回、精确结构检索为条件兜底,本地脚本加权打分后按「得分率 > 法院层级 > 审判程序 > 裁判日期」排序,并检测**同院同日同标题的重复入库**案件、疑似重复者不占入报名额;截取匹配度最高的 5–10 例类案,逐案调详情核验案号并摘录判词原文,最后直接输出含页脚页码的 DOCX 报告(默认保存至桌面)。全流程人工确认 1 次、检索类调用控制在 2 次召回 + ≤10 次详情以内,报告阶段检索冻结。未指定结果时三要素高匹配而结果相反者亦会入报(逐例标注结果方向),指定结果时结果相反者一律剔除;报告内以两处固定声明披露「未设不利先例定向检索路径」的局限。当用户要求「快速检索类似案例」「找几个正向案例」「快速版案例检索报告」「检索 5 到 10 个类案并出报告」「出一份类案检索报告 docx」时使用。需要四象限归位、反向案例定向检索、补充召回多轮迭代或 14 分制硬软条件精判时,应使用完整版技能「案例检索报告Plus」而非本技能。基于华宇元典法律数据 MCP。

日本語の概要は準備中です。原文の説明を表示しています。

CSlawyer1985/legal-skillhub152026年9月23日 更新

88查企业风险查询与分析工具 —— 专注于中国大陆企业的法务风险查询与分析,覆盖经营异常、行政处罚、监管措施、被执行人、失信被执行人、司法案件等风险类型。支持公司名称、统一社会信用代码、companyId 三种输入方式,自动完成风险查询并输出结构化风险分析总结。 触发场景:仅当用户意图为查询企业风险/法务风险时触发。包括但不限于:企业风险查询、公司风险、经营异常、行政处罚、监管措施、被执行人、失信被执行人、司法风险、风险扫描、风险评估、企业合规审查、风险报告、XX公司有什么风险、XX公司安全吗、XX公司有没有处罚、XX公司被执行过吗。 不触发场景:纯粹的企业信息查询(如查公司、搜企业、工商信息、注册资本、法人代表、股东结构、专利商标等)不应触发本技能,请使用其他 cha88 系列工具。

日本語の概要は準備中です。原文の説明を表示しています。

CSlawyer1985/legal-skillhub152026年9月23日 更新

Manages Rule 30(b)(6) corporate representative deposition workflows — drafting notice topics with reasonable particularity, building examination outlines, defending designees, handling objections, and preserving binding admissions for summary judgment or trial. Use when drafting or responding to 30(b)(6) notices, selecting and preparing designees, building topic-by-topic outlines, or triaging scope and privilege disputes. Trigger keywords: 30(b)(6), corporate representative deposition, topic list, designee, notice analysis, deposition objections, corporate admissions.

日本語の概要は準備中です。原文の説明を表示しています。

CSlawyer1985/legal-skillhub152026年9月23日 更新

Guides taking and defending Rule 30(b)(6) corporate representative depositions. Drafts topic lists with reasonable particularity, builds examination outlines for binding corporate admissions, analyzes noticed topics for objections, and prepares designees. Use when drafting 30(b)(6) notices, preparing corporate deposition topics, selecting or preparing designees, or defending corporate representative depositions.

日本語の概要は準備中です。原文の説明を表示しています。

CSlawyer1985/legal-skillhub152026年9月23日 更新

Drafts FDA 510(k) Premarket Notification submissions demonstrating substantial equivalence under 21 CFR Part 807. Supports Traditional, Special, and Abbreviated pathways. Use when preparing Class II medical device regulatory filings, substantial equivalence analyses, or FDA premarket submissions.

日本語の概要は準備中です。原文の説明を表示しています。

CSlawyer1985/legal-skillhub152026年9月23日 更新

Drafts a recordable Abstract of Judgment to create a judgment lien on a debtor's real property. Extracts party names, monetary components, and judgment details from case documents, then applies jurisdiction-specific formatting and certification requirements. Use post-judgment in commercial litigation when enforcing monetary awards, perfecting judgment liens, or preparing lien filings with the county recorder.

日本語の概要は準備中です。原文の説明を表示しています。

CSlawyer1985/legal-skillhub152026年9月23日 更新

CSlawyer1985 のスキルをすべて見る

このスキルの問題を報告する